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In the Claims 

Claims are amended as follows: 
1 to 19. (previously cancelled) 

20. (currently amended) A communication system comprising: 

a plurality of virtual private networks VPNs' Interconnected by a first data 

network; 

a second data network connected to the plurality of VPNs via the first data 
network, the second data network using a network addressing scheme that is different to a 
network addressing scheme used by at least one of said plurality of VPNs; and 

a VPN gateway having a VPN media proxy interfacing the first and second 
data networks, the VPN gateway being shared bv said plurality of VPNs and providing a 
plurality of virtual routing functions, respective ones of said Plurality of virtual routing 
functions being connected to respective ones of said plurality of VPNs such that each virtual 
routing function is tn the address space of a respective one of said plurality of VPNs, 
wherein the VPN media proxy being is configured to pass information from a source 
address in said at least one of said plurality of VPNs to a destination address in said second 
data network, the VPN media proxy having an address translator arranged to translate the 
destination address of the information in accordance with the network addressing scheme 
of the second data network, and to send the information towards the translated destination 
address in the second data network. 

21. (previously added) The communication system as claimed in claim 20, wherein the 
address translator is arranged to translate a destination address of information being 
transmitted from a source address in the second data network to a destination address in 
said at least one of said plurality of VPNs in accordance with the network addressing 
scheme of said at least one of said plurality of VPNs, and to send the information towards 
the translated destination address in said at least one of said plurality of VPNs. 
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22. (previously added) The communication system as claimed in claim 21 , wherein the first 
data network is a public data network using a public Internet Protocol 'IP 1 network 
addressing scheme, the second data network is a carrier data network using a private IP 
network addressing scheme and one or more of said plurality of VPNs uses a private IP 
network addressing scheme. 

23. (currently amended) The communication system as claimed in claim 22, wherein, 
where more than one of the VPNs use a private IP network addressing schemes, some of 
said private IP network addressing schemes have overlapping address ranges. 

24. (previously added) The communication system as daimed in claim 22, wherein the 
carrier data network Interfaces the public data network to a switched telephone network 
'STN' via a trunk gateway whose carrier data network IP address is the destination address 
for information being transmitted from a source address in any of the VPNs to a destination 
address in the carrier data network. 

25. (previously added) The communication system as claimed in claim 24, wherein the 
STN is a public STN *PSTN\ 

26. (currently amended) The communication system as claimed in claim 24, further 
comprising a VPN gateway int e rf a cing the pub l to and carri e r data notworko, wherein the 
VPN gateway being is configured to transmit call signaling information between said at least 
one of said plurality of VPNs and the carrier data network via the public data network and 
the VPN media proxy being configured to transmit bearer information comprising a call 
between said at least one of said plurality of VPNs and the carrier data network via the 
public data network once a call has been established in response to said transmission of 
call signaling information, the address translator of the VPN media proxy being configured 
to translate a destination address of said bearer information to the carrier data network IP 
address of the trunk gateway. 

27. (previously added) The communication system of claim 26, wherein the call signaling 
comprises voice over IP VoIP* call signaling and the call comprises a VoIP call. 
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28. (cancelled) 

29. (currently amended) The communication system as claimed in claim 23 20, wherein 
the address translator of the VPN media proxy is configured to provide a network address 
translation function to each of the virtual routing functions. 

30. (currently amended) A method of address translation in a communication system 
comprising a plurality of virtual private networks VPNs' interconnected by a first data 
network; a second data network connected to the plurality of VPNs via the first data 
network, the second data network using a network addressing scheme that is different to a 
network addressing scheme used by at least one of said plurality of VPNs; and a VPN 
gateway having a VPN media proxy interfacing the first and second data networks, the 
method comprising: 

providing in the VPN gateway a plurality of virtual routing functions. 

respective ones of said plurality of virtual routing functions being connected to respective 
ones of said plurality of VPNs such that each virtual routing function is in the address space 
of a respective one of said plurality of VPNs; 

passing information via the VPN media proxy from a source address in said 
at least one of said plurality of VPNs to a destination address in said second data network; 

at an address translator of the VPN media proxy, translating the destination 
address of the information in accordance with the network addressing scheme of the 
second data network, and 

sending the information towards the translated destination address in the 
second data network. 

31. (previously added) The method as claimed in claim 30, wherein the address translator 
translates a destination address of information being transmitted from a source address in 
the second data network to a destination address in said at (east one of said plurality of 
VPNs in accordance with the network addressing scheme of said at least one of said 
plurality of VPNs, and sends the information towards the translated destination address in 
said at least one of said plurality of VPNs, 

32. (cancelled) 
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33. (currently amended) The method as claimed in claim 32 30, wherein the address 
translator of the VPN media proxy provides a network address translation function to each 
of the virtual routing functions. 

34. (previously added) The method as claimed in claim 31. wherein the first data network 
is a public data network using a public Internet Protocol IP' network addressing scheme, 
the second data network is a carrier data network using a private IP network addressing 
scheme and one or more of said plurality of VPNs uses a private IP network addressing 
scheme. 

35. (previously added) The method as claimed in claim 31 , wherein, where more than one 
of the VPNs use a private IP network addressing schemes, some of said private IP network 
addressing schemes have overlapping address ranges. 

36. (previously added) The method as claimed in claim 31, wherein the carrier data 
network interfaces the public data network to a switched telephone network 'STN' via a 
trunk gateway whose carrier data network IP address is the destination address for 
information being transmitted from a source address in any of the VPNs to a destination 
address In the carrier data network. 

37. (previously added) The method as claimed in claim 36, wherein the STN is a public 
STN 'PSTN\ 

38. (currently amended) The method as claimed in claim 36, wherein th e commun i cation 
s y s t e m furth e r compri ses a VPN gat e way int e rfac i ng th e pub l ic and carr ie r dat a n e tworks, 
the VPN gateway transmitting transmits voice over IP 'VoIP* call signaling information 
between said at least one of said plurality of VPNs and the carrier data network via the 
public data network and the VPN media proxy transmitting bearer information comprising a 
VoIP call between said at least one of said plurality of VPNs and the carrier data network 
via the public data network once a VoIP call has been established in response to said 
transmission of VoIP call signaling information, the address translator of the VPN media 
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proxy translating a destination address of said bearer information to the carrier data network 
IP address of the trunk gateway. 

39. (currently amended) A virtual private network VPN 7 gateway having a VPN media 
proxy for a communication system comprising a plurality of virtual private networks VPNs' 
interconnected by a first data network and a second data network connected to the plurality 
of VPNs via the first data network, the second data network using a network addressing 
scheme that is different to a network addressing scheme used by at least one of said 
plurality of VPNs; the VPN media pfe*y gateway comprising: 

a first interface for interfacing with the first data network; 

a second interface for interfacing with the second data network; 

a plurality of virtual routing functions, respective ones of said plurality of 
virtual routing functions being connected to respective ones of said plurality of VPNs such 
that each virtual routing function is in the address space of a respective one of said plurality 
of VPNs whereby said VPN gateway is shared by said plurality of VPNs: and 

means for passing information from a source address in said at least one of 
said plurality of VPNs to a destination address in said second data network, said means for 
passing information comprising an address translator for translating the destination address 
of the information in accordance with the network addressing scheme of the second data 
network and sending the information towards the translated destination address in the 
second data network. 

40. (currently amended) The VPN m e dia proxy gateway as claimed In claim 39, wherein 
the address translator is arranged to translate a destination address of information being 
transmitted from a source address in the second data network to a destination address in 
said at least one of said plurality of VPNs in accordance with the network addressing 
scheme of said at least one of said plurality of VPNs, and to send the information towards 
the translated destination address in said at least one of said plurality of VPNs. 

41. (cancelled) 
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42. (currently amended) The VPN media - pr o xy gateway as claimed in claim AX 39, 
wherein the address translator of the VPN media proxy is configured to provide a network 
address translation function to each of the virtual routing functions. 

43. (currently amended) The VPN m e d ia - p r o x y gateway as claimed in claim 40, wherein 
the first data network is a public data network using a public Internet Protocol IP' network 
addressing scheme, the second data network is a carrier data network using a private IP 
network addressing scheme and one or more of said plurality of VPNs uses a private IP 
network addressing scheme, the carrier data network interfaces the public data network to a 
switched telephone network 'STN* via a trunk gateway whose carrier data network IP 
address is the destination address for information being transmitted from a source address 
in any of the VPNs to a destination address in the carrier data network, a VPN gateway is 
provided to interface the public and carrier data networks and to transmit voice over IP 
VoIP 1 call signaling information between said at least one of said plurality of VPNs and the 
carrier data network via the public data network and wherein the means for passing is 
configured to transmit bearer information comprising a VoIP call between said at least one 
of said plurality of VPNs and the carrier data network via the public data network once a 
VoIP call has been established in response to said transmission of VoIP call signaling 
information, the address translator being configured to translate a destination address of 
said bearer information to the carrier data network IP address of the trunk gateway. 

34. (n e w) Th e VPN m e d i a proxy as c la im e d i n cla i m 33, wh e r ei n, whewa moro than on e of 
th e VPN s us e a privat e I P n e twork a ddr e ssing s chemes, some of sa i d priv a t e I P n e twork 

44. (currently amended) The VPN m e dia proxy gateway as claimed in claim 43, wherein 
the STN is a public STN PSTN'. 

45. (currently amended) The VPN modio proxy gateway as claimed in claim 40, further 
comprising a configuration store for storing configuration information comprising source and 
destinations addresses for information being transmitted between an entity in one of said 
plurality of VPNs and an entity in said second data network, wherein said configuration 
information includes information associating said source and destination addresses with 
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respective target addresses, said target addresses comprising the translated destination 
addresses in said one of said plurality of VPNs and said second data network. 

46. (currently amended) A computer readable medium storing computer readable 
instructions which, when executed by a processor of a computing device, cause said 
computing device to implement, in a communication system comprising a plurality of virtual 
private networks VPNs' interconnected by a first data network; a second data network 
connected to the plurality of VPNs via the first data network, the second data network using 
a network addressing scheme that is different to a network addressing scheme used by at 
least one of said plurality of VPNs; and a VPN gateway having a VPN media proxy 
interfacing the first and second data networks, the steps of: 

providing in the VPN gateway a plurality of virtual routing functions, 
respective ones of said plurality of virtual routing functions being connected to respective 
ones of said Plurality of VPNs such th at each virtual routing function is in the address space 
Of a respective one of said plurality of VPNs: 

passing information via the VPN media proxy from a source address in said 
at least one of said plurality of VPNs to a destination address in said second data network; 

at an address translator of the VPN media proxy, translating the destination 
address of the information in accordance with the network addressing scheme of the 
second data network, and 

sending the information towards the translated destination address in the 
second data network. 
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